Vulnerabilities > CVE-2002-1239 - Unspecified vulnerability in QNX Rtos 6.2.0
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.
Exploit-Db
| description | QNX RTOS 6.2 Application Packager Non-Explicit Path Execution Vulnerability. CVE-2002-1239. Local exploit for linux platform |
| id | EDB-ID:22002 |
| last seen | 2016-02-02 |
| modified | 2002-11-08 |
| published | 2002-11-08 |
| reporter | Texonet |
| source | https://www.exploit-db.com/download/22002/ |
| title | QNX RTOS 6.2 Application Packager Non-Explicit Path Execution Vulnerability |